Ransomware readiness for mid-sized companies
Know how exposed your company is to ransomware, and what to fix first.
A two-week, fully remote review that shows where you stand and gives you a 90-day plan your IT team or provider can carry out. No software to install and no long-term contract.
- Your business hours, in English or Spanish
- You always work with me
- Nothing installed, no passwords requested
Why now
Insurers and larger customers are asking for more proof every year.
Before they renew a policy or sign a contract, they want to see controls that actually work, not a checklist.
Ransomware Exposure Assessment
Two weeks. Seven areas. One clear plan.
It answers one question: if ransomware hit you tomorrow, or someone took over your CEO’s email, how bad would it be, how fast could you get back to work, and what do you fix first?
- 01What an attacker sees from outsideYour email setup, websites, exposed services and leaked passwords, checked without touching anything.
- 02Accounts and accessWho gets in, with what permissions, and whether multi-factor authentication is on where it matters.
- 03Device protectionWhether your protection is actually on, whether someone receives its alerts, and whether laptops are encrypted.
- 04Backups and recoveryWe run a real restore test: having a backup is not enough.
- 05Email and phishingForwarding, suspicious rules, and how ready your people are to spot a scam.
- 06Vendors and privileged accessWhich outsiders can reach your systems, since when, and under what control.
- 07Incident response planIf something happens on a Saturday at 2 a.m., who finds out, who they call and what they do.
How it works
Fully remote, and your business keeps running.
About 4 to 5 hours from your IT person over two weeks, and 3 hours from leadership. It is not a penetration test: we don’t attack anything, install anything or change any settings.
- 1KickoffVideo call, 1 hourWe sign the authorization letter and NDA, and agree on dates and contacts.
- 2QuestionnaireYour team, 1.5 to 2 hoursA detailed questionnaire and a short list of reports you already have.
- 3Outside-in reviewOur side, nothing touchedPublic information only: what an attacker would see.
- 4Guided sessionVideo call, 2.5 hoursYour IT person shares their screen; together we check accounts, email, devices and backups.
- 5Results presentationVideo call, 1 hour 15 minWhat we found, what matters most and what to do first. You decide at your own pace.
Services
Start with the assessment. Keep going only if it helps.
Security leadership, a few hours a month
Senior guidance without a full-time hire: priorities, policies, insurer and customer questionnaires, vendor reviews and a monthly check-in.
For: smaller companies with an IT provider and no one in charge of security.
Your part-time security leader
A security roadmap, regular meetings with leadership, reporting to owners or the board, and support for your IT director on every security decision.
For: companies with an IT director and no dedicated security lead.
Around-the-clock coverage, through a CREST-accredited partner
When you need eyes on your systems at 3 a.m., or help during an incident, our 24/7 monitoring runs through a CREST-accredited partner. You keep one point of contact: me.
Who you’ll work with
Victor Patron, founder of Centinela Digital
Systems engineer with decades of experience in sales, startups and enterprise development, now focused on protecting mid-sized companies from ransomware. Pursuing a Master’s in Cybersecurity at Tec de Monterrey. Based in Guadalajara, Mexico.
Big security firms focus on big enterprises. A smaller firm can give you better service: fast answers, close follow-up and work adjusted to your company. I usually reply within 2 hours during business hours.
A founding-client rate is available for a few U.S. companies this quarter.
Let’s talk
15 to 20 minutes to see if it’s a fit.
Tell me a little about your company and I’ll reply with two times that work for you.